sputniknews.com

The spyware was developed by the Israeli cyber intelligence company NSO Group, the Financial Times reported. According to the newspaper, the code could be transferred to a target’s device by calling the user and infecting the call whether or not the recipient answered the call. The vulnerability was used in an attempted attack on the phone of a UK-based attorney on 12 May. The lawyer, according to the report, is involved in a lawsuit against NSO brought by a group of Mexican journalists, government critics, and a Saudi Arabian dissident.

WhatsApp said that the vulnerability was discovered this month and that the company quickly addressed the problem within its own infrastructure, publishing an update on Monday. It has also alerted US law enforcement to the exploit, and published a “CVE notice” to other cybersecurity experts alerting them to “common vulnerabilities and exposures”.

NSO Group has denied the allegations, telling the FT that it was investigating the WhatsApp attacks.

NSO is most well-known for the sale of its spyware, Pegasus, to state intelligence agencies. Once installed on a phone, the software can extract all of the data that’s already on the device (text messages, contacts, GPS location, email, browser history, etc) in addition to creating new data by using the phone’s microphone and camera to record the user’s surroundings and ambient sounds, according to a 2016 report by the New York Times. The Pegasus spyware, however, does not affect or involve WhatsApp’s encryption.

94